RE: [FW1] SecuRemote and Entrust?

[Emmanuel Bailleul <Emmanuel.Bailleul@FW1-NOSPAMadilan.fr>]

You can use any theoretecally .. I made it work also with RSA Keon and even
OpenSSL and I know it operates well with Baltimore. The problem you will
encounter is that you need to have a 'crl server' online (ldap or http).
It's not always easy to build one and it's not always easy to make it work
with FW-1. It depends on how the PKI you want to use is designed : LDAP
absed crl or HTTP base one. For OpenSSL, I had to use an HTTP based crl and
the way you include the URL for it in your certificates is tricky ....
By the way, using public key authentication for securemote is worth the work
you will get to make it work, as it's much more secure than pre-shared keys
...
 
Emmanuel Bailleul
ASCOM Adilan
FRANCE

-----Message d'origine-----
De: Mark Squire [mailto:MSquire@desonline.com]
Date: samedi 27 janvier 2001 00:08
À: 'fw-1-mailinglist-digest@lists.us.checkpoint.com'
Objet: [FW1] SecuRemote and Entrust?



Hi all, 
Yet another question: 
Do you HAVE to use Entrust with SecuRemote, or can you use other CAs like
Microsoft's?  Any ideas? 

C:\Mark 



================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================